the connection string http://user:password@ip
gets saved as is aka cleartext into the psql database.
it would be great if nextcloud and/or plugins would support something like
ELASTIC_PASSWORD_FILE=/run/secrets/the_elastic_password.txt
to make use of docker secrets and then declare the connection string something like
http://user:$(ELASTIC_PASSWORD)@ip